Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2022-34791Highio.jenkins.plugins:validating-email-parameter: Cross-site Scripting in Jenkins Validating Email Parameter PluginCVE-2022-34796Mediumorg.jenkins-ci.plugins:ec2-deployment-dashboard: Jenkins Deployment Dashboard Plugin has Insufficiently Protected CredentialsCVE-2022-34793Highorg.jenkins-ci.plugins:recipe: XML External Entity Reference in Jenkins Recipe PluginCVE-2022-34788Highnet.praqma:matrix-reloaded: Jenkins Matrix Reloaded Plugin vulnerable to Stored XSSCVE-2022-34790Highorg.jenkins-ci.plugins:xfpanel: Cross-site Scripting in Jenkins eXtreme Feedback Panel PluginCVE-2022-34789Mediumnet.praqma:matrix-reloaded: Jenkins Matrix Reloaded Plugin vulnerable to CSRFCVE-2022-34782Mediumorg.jenkins-ci.plugins:requests: Incorrect Authorization in Jenkins requests-pluginCVE-2022-34801Lowtools.devnull:build-notifications: Cleartext Storage of Sensitive Information in Jenkins Build Notifications PluginCVE-2022-34777Highorg.jenkins-ci.plugins:gitlab-plugin: Cross-site Scripting in Jenkins GitLab PluginCVE-2022-34780Mediumcom.xebialabs.ci:xlrelease-plugin: CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentialsCVE-2022-34799Loworg.jenkins-ci.plugins:ec2-deployment-dashboard: Plaintext Storage of a Password in Jenkins Deployment Dashboard PluginCVE-2022-34798Mediumorg.jenkins-ci.plugins:ec2-deployment-dashboard: Missing Authorization in Jenkins Deployment Dashboard PluginCVE-2022-34795Highorg.jenkins-ci.plugins:ec2-deployment-dashboard: Cross-site Scripting in Jenkins Deployment Dashboard PluginCVE-2022-34785Mediumorg.jenkins-ci.plugins:build-metrics: Jenkins build-metrics Plugin Missing Authorization vulnerabilityCVE-2022-34779Mediumcom.xebialabs.ci:xlrelease-plugin: Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDsCVE-2022-34792Highorg.jenkins-ci.plugins:recipe: Cross-Site Request Forgery in Jenkins Recipe PluginCVE-2022-34783Highorg.jenkins-ci.plugins:plot: Cross-site Scripting in Jenkins Plot PluginCVE-2022-34784Highorg.jenkins-ci.plugins:build-metrics: Cross site scripting in Jenkins build-metrics PluginCVE-2022-34786Highorg.jenkins-ci.plugins:rich-text-publisher-plugin: Cross-site Scripting in Jenkins Rich Text Publisher PluginCVE-2022-34802Loworg.jenkins-ci.plugins:rocketchatnotifier: Plaintext Storage of a Password in Jenkins RocketChat Notifier PluginCVE-2022-34787Highhudson.plugins:project-inheritance: Jenkins Project Inheritance Plugin vulnerable to cross site scriptingCVE-2022-34797Mediumorg.jenkins-ci.plugins:ec2-deployment-dashboard: Cross-Site Request Forgery in Jenkins Deployment Dashboard PluginCVE-2022-34794Highorg.jenkins-ci.plugins:recipe: Missing Authorization in Jenkins Recipe PluginCVE-2022-34778Highorg.jenkins-ci.plugins:testng-plugin: Cross-site Scripting in Jenkins TestNG Results PluginCVE-2022-34800Lowtools.devnull:build-notifications: Plaintext Storage of a Password in Jenkins Build Notifications Plugin

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo